$ rpki-client -vvf repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.mft File: 28E2707085C2950AF9267465A3801841D8077215.mft (raw, json) Hash identifier: e4+mSO3WEtEgiPU4eBs4cx2e3gsdBT92Rpbh0VlYzig= Subject key identifier: 0B:0F:85:09:BE:36:A0:68:C3:AD:FD:69:50:7C:32:69:8C:CD:B6:EF Authority key identifier: 28:E2:70:70:85:C2:95:0A:F9:26:74:65:A3:80:18:41:D8:07:72:15 Certificate issuer: /CN=28E2707085C2950AF9267465A3801841D8077215 Certificate serial: 414FE4D90EE39503F3F629953E16769468150460 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28E2707085C2950AF9267465A3801841D8077215.cer Subject info access: rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.mft Manifest number: 022E Signing time: Thu 26 Mar 2026 00:41:12 +0000 Manifest this update: Thu 26 Mar 2026 00:36:12 +0000 Manifest next update: Sun 29 Mar 2026 08:11:12 +0000 Files and hashes: 1: 28E2707085C2950AF9267465A3801841D8077215.crl (hash: rsZYlLPHbnKrxGSumvhWdpqKy7tph0mQVEtXFJqOqUQ=) 2: 3130332e3138342e36362e302f32332d3234203d3e20313439363730.roa (hash: NmvwQ+vJpzvl8csZBAxbb4I15urZPoz8PAj6HkV5eq8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.crl rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28E2707085C2950AF9267465A3801841D8077215.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 08:11:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:4f:e4:d9:0e:e3:95:03:f3:f6:29:95:3e:16:76:94:68:15:04:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28E2707085C2950AF9267465A3801841D8077215 Validity Not Before: Mar 26 00:36:12 2026 GMT Not After : Mar 29 08:11:12 2026 GMT Subject: CN=0B0F8509BE36A068C3ADFD69507C32698CCDB6EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:b6:29:be:3e:e7:ae:fc:28:4a:00:1a:16:1e: fd:ca:8f:47:58:90:b6:45:6e:10:8e:f9:09:c3:20: c1:2e:80:cc:19:01:db:3e:d6:87:68:f4:9c:5c:74: 09:fa:3a:bc:3d:46:69:14:d6:1b:b7:51:3b:ec:fa: 02:06:3e:c8:57:72:bf:a2:ca:38:08:b5:a2:a6:8b: 81:1d:04:7b:50:f8:02:55:b1:b1:81:08:e4:5b:e6: 57:6f:c2:06:f8:00:13:c7:af:5a:4e:b3:da:89:1e: 46:e9:7a:2c:b1:d8:df:d8:3a:fa:be:4b:d2:dd:18: 73:15:89:bd:4b:ff:ad:51:20:72:44:c2:58:0b:45: 3e:c5:ee:9d:fb:ca:87:95:48:f6:01:17:cb:26:0e: b7:06:8e:87:09:65:35:fe:13:49:9c:df:81:01:41: dc:2b:65:56:8a:92:6b:be:3e:9c:88:72:b2:c9:91: da:54:29:d0:6d:a3:63:98:54:e7:4a:b9:fb:98:03: dd:37:20:ff:b7:04:16:3b:07:78:b6:63:fc:b8:b2: de:52:a6:8f:0d:d3:04:03:7e:5c:bf:b2:f0:89:7b: f0:80:66:4a:1b:3c:59:35:3d:9a:84:de:62:87:16: 90:b9:68:e5:48:ad:5f:cf:70:cc:f2:13:c2:24:86: a7:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:0F:85:09:BE:36:A0:68:C3:AD:FD:69:50:7C:32:69:8C:CD:B6:EF X509v3 Authority Key Identifier: keyid:28:E2:70:70:85:C2:95:0A:F9:26:74:65:A3:80:18:41:D8:07:72:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28E2707085C2950AF9267465A3801841D8077215.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d7:c1:e7:ec:c7:3e:9f:de:1c:0b:2b:66:20:73:8e:1e:d6:b1: 74:f5:e5:3e:4b:99:1a:29:c3:38:1c:aa:4e:9a:45:7f:b0:86: 6c:0f:f4:c8:3b:79:1c:db:20:45:a3:9f:ff:6f:20:61:33:a2: da:c4:9e:d7:8e:53:0d:ec:0b:9b:a5:a3:d2:28:21:88:68:d8: b3:1f:ba:e0:f6:6d:aa:02:c0:aa:22:28:92:63:0b:cb:c9:6c: db:78:f8:00:01:d2:10:52:61:f5:2e:39:e2:f9:7b:c7:85:55: 52:a8:70:75:93:49:ab:9b:07:b9:16:b8:51:08:48:a5:c1:b2: aa:66:2b:b4:07:58:f7:0b:9e:10:55:f8:7e:b2:d0:13:be:16: 6f:43:a8:e9:1e:f5:51:9b:cc:36:01:3a:47:36:11:58:51:88: de:85:d4:1e:1c:0f:b5:2c:2e:73:ef:18:9e:f9:0f:cd:62:5c: e8:e5:59:32:15:1e:42:b8:15:fb:eb:db:91:38:82:34:b4:99: 60:da:ed:7a:77:de:04:53:b6:d5:47:92:9c:c3:d2:e9:7a:3d: e8:df:67:24:57:3d:55:da:d2:e7:05:f1:aa:ea:9e:46:e0:44: 23:99:fe:9e:76:7e:17:25:0d:dd:f6:0e:47:b6:17:40:48:eb: 23:de:ad:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQU/k2Q7jlQPz9imVPhZ2lGgVBGAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhFMjcwNzA4NUMyOTUwQUY5MjY3NDY1QTM4MDE4NDFE ODA3NzIxNTAeFw0yNjAzMjYwMDM2MTJaFw0yNjAzMjkwODExMTJaMDMxMTAvBgNV BAMTKDBCMEY4NTA5QkUzNkEwNjhDM0FERkQ2OTUwN0MzMjY5OENDREI2RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD6tim+Pueu/ChKABoWHv3Kj0dY kLZFbhCO+QnDIMEugMwZAds+1odo9JxcdAn6Orw9RmkU1hu3UTvs+gIGPshXcr+i yjgItaKmi4EdBHtQ+AJVsbGBCORb5ldvwgb4ABPHr1pOs9qJHkbpeiyx2N/YOvq+ S9LdGHMVib1L/61RIHJEwlgLRT7F7p37yoeVSPYBF8smDrcGjocJZTX+E0mc34EB QdwrZVaKkmu+PpyIcrLJkdpUKdBto2OYVOdKufuYA903IP+3BBY7B3i2Y/y4st5S po8N0wQDfly/svCJe/CAZkobPFk1PZqE3mKHFpC5aOVIrV/PcMzyE8IkhqfPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCw+FCb42oGjDrf1pUHwyaYzNtu8wHwYDVR0j BBgwFoAUKOJwcIXClQr5JnRlo4AYQdgHchUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NDQ2OWVlOS04MTRlLTQ1N2EtYmIxMy1hNWM0YjZmMWI1YWYvMC8yOEUyNzA3MDg1 QzI5NTBBRjkyNjc0NjVBMzgwMTg0MUQ4MDc3MjE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjhFMjcwNzA4NUMyOTUwQUY5MjY3NDY1QTM4MDE4NDFEODA3 NzIxNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDQ0NjllZTktODE0ZS00NTdhLWJi MTMtYTVjNGI2ZjFiNWFmLzAvMjhFMjcwNzA4NUMyOTUwQUY5MjY3NDY1QTM4MDE4 NDFEODA3NzIxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANfB5+zHPp/eHAsrZiBzjh7WsXT15T5LmRop wzgcqk6aRX+whmwP9Mg7eRzbIEWjn/9vIGEzotrEnteOUw3sC5ulo9IoIYho2LMf uuD2baoCwKoiKJJjC8vJbNt4+AAB0hBSYfUuOeL5e8eFVVKocHWTSaubB7kWuFEI SKXBsqpmK7QHWPcLnhBV+H6y0BO+Fm9DqOke9VGbzDYBOkc2EVhRiN6F1B4cD7Us LnPvGJ75D81iXOjlWTIVHkK4Ffvr25E4gjS0mWDa7Xp33gRTttVHkpzD0ul6Pejf ZyRXPVXa0ucF8arqnkbgRCOZ/p52fhclDd32Dke2F0BI6yPerYE= -----END CERTIFICATE-----Generated at Thu Mar 26 16:58:25 2026 by rpki-client